Nearly every company considers a cloud enclave solution when preparing for CMMC. However, most companies decide on a solution before they fully understand the nature of the problem they are trying to solve. Cloud enclaves work wonders for companies that can contain their Controlled Unclassified Information (CUI) within an enclave. Unfortunately, CUI data flows tend to closely follow business data flows. As a result, most companies dramatically under-scope and underfund their cloud and on-premises environments while simultaneously setting themselves up for failure during a CMMC assessment.